Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: IGv7Y2QIL7MjDTY8PLlBeD7UnBxaGqlef8OOmYGuL2w=
Subject key identifier: 71:1F:CE:79:D1:9F:13:0A:11:22:7C:4F:86:AD:42:30:66:41:70:56
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 019D394154A03C22D90259353873F73514FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 11:01:15 +0000
Manifest this update: Sun 29 Mar 2026 11:01:15 +0000
Manifest next update: Mon 30 Mar 2026 11:01:15 +0000
Files and hashes: 1: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: AeDVASYhJyh0KcDBLCpPKtuIP1DnFBRigY4aShQF3rE=)
2: oHaqxqTMWybml5c6wSCcPWrN2MI.roa (hash: ASmpLH273yXVFzp2LFZCIwFoN6v91nXnKPxcq712jXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:54:a0:3c:22:d9:02:59:35:38:73:f7:35:14:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Mar 29 11:01:15 2026 GMT
Not After : Mar 30 11:01:15 2026 GMT
Subject: CN=711fce79d19f130a11227c4f86ad423066417056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:c3:36:8d:69:c9:b9:73:4f:1f:48:fe:54:
1a:fb:fa:82:5c:90:dd:d1:be:cb:8b:65:7b:ed:91:
c1:cc:79:80:31:14:12:0f:8f:f9:22:07:44:de:db:
6e:f9:52:0e:03:df:78:8f:43:9c:c8:0f:37:c8:ca:
27:52:4c:98:61:e3:0f:33:c8:03:14:dc:2e:64:aa:
66:97:93:ce:8c:f4:82:14:05:62:53:89:77:ab:a8:
92:74:32:38:eb:54:eb:25:a1:86:a1:7d:5d:d4:33:
66:22:49:27:b3:06:f5:e7:75:ec:c0:03:de:f3:fd:
7b:f5:68:0b:88:a2:a8:98:01:61:93:1a:98:1d:75:
93:10:5a:d5:77:a8:72:1f:b9:d4:60:7b:f5:4f:0c:
47:95:69:ef:84:6b:31:54:f0:fc:27:31:c8:56:ad:
42:9c:a5:99:e9:74:c7:9c:4f:6f:02:b5:e7:84:34:
e3:aa:0a:a1:ed:7e:1c:78:b7:d6:ee:12:7b:49:6a:
b5:ac:23:ce:30:be:77:0a:4a:bc:4e:1a:68:08:34:
70:d1:75:11:da:dc:66:49:7e:fb:15:51:fa:a1:59:
36:d2:f1:58:94:a8:cd:59:26:cf:59:5f:8f:92:84:
6a:ba:c6:e7:e5:03:d4:f8:4b:31:b6:8c:45:04:37:
e9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1F:CE:79:D1:9F:13:0A:11:22:7C:4F:86:AD:42:30:66:41:70:56
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:57:dd:cd:ea:72:9b:bd:f7:74:ad:20:76:82:c7:42:91:47:
e1:6e:05:fa:92:88:20:71:6e:9c:71:e3:00:97:b2:3b:44:09:
6f:7d:9b:95:18:e2:32:d9:7a:ce:3e:ec:5b:fa:9c:a9:e7:ed:
c5:bf:02:8d:48:3e:1c:35:b5:78:e4:4a:35:23:09:84:3f:f9:
55:2b:33:52:b8:36:7b:7c:96:be:be:d2:d5:d3:6b:64:e2:41:
90:ae:7f:95:5b:34:c9:bf:d9:d0:ac:c5:40:ff:d1:45:db:eb:
51:20:39:96:7e:9f:9d:3c:91:21:37:1f:29:25:6b:b2:a7:c1:
a7:62:5c:87:b1:2a:26:e7:6d:e0:b5:89:9a:97:bd:1e:7a:23:
3e:be:88:e8:92:6b:e0:76:a6:b5:d7:fc:18:cd:48:0b:1b:cb:
35:f5:3b:0e:66:57:db:8a:45:49:b3:06:7a:8a:19:f3:67:2b:
e4:45:5a:70:6b:db:1d:8e:59:22:c8:2d:86:1b:1f:3d:44:a8:
d2:3d:8b:7b:ed:14:85:e6:3d:93:46:35:8f:de:3c:23:64:fb:
ab:7a:3a:81:ad:13:c7:9b:11:ad:60:7d:96:0a:e1:f3:eb:0c:
ee:06:95:00:f5:8f:6c:a6:85:34:41:b1:37:ce:85:17:fa:a7:
46:d1:82:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:51 2026 by rpki-client